michael@0: X-Content-Security-Policy: policy-uri http://example.com/some_policy
michael@0: Content-type: text/html; charset=utf-8